Fedora 32: 2021-f62099fe51 Critical: Netpbm Heap Buffer Overflow

The netpbm package contains a library of functions which support

programs for handling various graphics file formats, including .pbm

(portable bitmaps), .pgm (portable graymaps), .pnm (portable anymaps),

.ppm (portable pixmaps) and others.

New upstream version 10.94.00. Introduced new script pamhomography.

* Mon Jan 25 2021 Josef Ridky - 10.93.00-1

- New upstream release 10.93.00 (#1911159)

[ 1 ] Bug #1561207 - CVE-2018-8975 netpbm: heap-buffer-overflow in pm_mallocarray2 function in lib/util/mallocvar.c [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1561207

[ 2 ] Bug #1911159 - netpbm-10.93.00 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1911159

su -c 'dnf upgrade --advisory FEDORA-2021-f62099fe51' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/